Amd Ryzen 9 3900X vulnerabilities, page 2

30 vulnerabilities

Known vulnerabilities in Amd Ryzen 9 3900X, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2020-12931amdamd_3015ce_firmware+105
EPSS score
0.27%
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.
7.8CVE-2020-12930amdamd_3015ce_firmware+108
EPSS score
0.27%
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.
4.7CVE-2022-27672amd1st gen amd epyc™ processors+274
EPSS score
0.28%
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
9.8CVE-2022-23821amdamd ryzen™ embedded 5000+131
EPSS score
0.99%
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
9.8CVE-2022-23820amd3rd gen amd epyc™ processors+123
EPSS score
0.70%
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
6.8CVE-2023-20589amd4700s_firmware+143
EPSS score
0.58%
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.
7.5CVE-2023-20533amd2nd gen amd epyc™ processors+96
EPSS score
0.50%
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
8.8CVE-2023-20558amd2nd gen amd ryzen™ threadripper™ processor+95
EPSS score
0.67%
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
8.8CVE-2023-20559amd2nd gen amd ryzen™ threadripper™ processor+95
EPSS score
0.67%
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
5.5CVE-2023-20593amd2nd gen amd epyc™ processors+259
EPSS score
5.19%
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.